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What is claimed is: 



1. 



2. 



3. 



A method for providing a necessary level of security for a computer capable of 
comiecting to different computing enviromnents, the method comprising: 

monitoring a type of comiection between the computer and a network in a 
current computing environment; 



determining 

network; 



a security level of data before sending the data across the 



storing the data in a buffer instead of sending the data across the network if the 
comiection to the network lacks a security control required for the determined 
security level of the data; and 

sending the data from the buffer when the computer is comiected to a changed 
computing enviromnent having a new type of comiection that has the security 
control required for the data. 

The method of claim 1 wherein monitoring a type of comiection comprises 
periodically determining the type of comiection between the computer and the 
network. 

The method of claim 1 wherein monitoring a type of comiection comprises 
event-driven determining of the type of comiection between the computer and 
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the network. 

4 The method of claim 3 whe«in steps of the method are carried out by a 
software process and event-driven determining of the type of connection .s 
carried out whenever the process is invoked. 

5 The method of claim 3 wherein determining a security level results in a 
determmation that data to be transmitted requires at least some level of 
security and event^iriven determining of the type of connection is earned out 
in response to such determination. 

e The method of claim 1 wherein detennining a security level of data before 
sending the data across the current network comprises reading the secunty 
level of data from a markup element embedded in the data. 

7 The method of claim 1 wherein detemiining a security level of data before 
sending the data across the current network comprises reading the secunty 
level of data from meta-data in a header in a network message. 

8 The method of claim 1 fi»ther comprising returning a non-fatal error to a 
sending program if the comtection to the network lacks a security control 
required for the data. 

9 The method of claim 8 further comprising the sending program's informing a 
user that the data will be held in a security buffer until the computer is 
connected to a changed computing environment having a new type of 
comiection that has the security control required for the data. 
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,0 ThemethodofclaimSfurtheroomprisingthesendingprogram'spromptinga 
user with the option to create a secure tunnel for transtnission of the data. 

1 1 A method for providing a necessary level of security for a computer capable of 
connecting to different computing environments, the method compnsmg: 

connecting the computer to a network in a first computing enviromnent; 

specifying a security level for data to be sent aaoss the network; 

instructing a sending program to send the data across the network; 

10 receiving an indication that security control of the first computing 

enviromnent lacks a security control required for the specified security level; 

comtecting the computer to the network in a second computing enviromnent, 
wherein the second computing enviromnent has the security control required 
1 5 for the specified security level; and 

receiving an indication that the data has been sent across the network. 
12. The method of claim 1 1 further comprising: 

determining, when the computer is connected to the second network, that the 
second computing environment has the security control required for the 
5 specified security level; and 
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automatically sending the data across the network prompfly upon determming 
that the second computing environment has the security control requ«cd for 

the specified security level. 

13. The method of claim 1 1 further comprising: 

receiving an indication that the second computing enviromnent has the 
security control required for the specified security level; and 

again instructing the sending program to send the data across the network. 
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14 A system for providing a necessary level of security for a computet capable of 
comiecting to different computing environments, the system compnsmg: 

means for monitoring a type of eomtection between the computer and a 
network in a current computing environment; 

means for determining a security level of data before sending the data across 
the network; 

means for storing the data in a buffer instead sending the data across the 
network if the connection to the network lacks a security control reqmred for 
the determined security level of the data; and 

means for sending the data from the buffer when the computer is connected to 
a changed computing environment having a new type of comiection that has 
the security control required for the data. 



15. 



The system of claim 14 wherein means for monitoring a type of connection 
comprises means for periodically determining the type of comiection between 
the computer and the network. 

16 The system of claim 14 wherein means for monitoring a type of comiection 
comprises means for event-driven determining of the type of connection 
between the computer and the network. 

17 The system of claim 16 wherein elements of the system are operated by a 
software process and means for event-driven determining of the type of 
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connection is 



operated whenever the process is invoked. 



18 The system of claim 16 wherein operation of the means for determmmg a 

security level results in a determination that data to be transmitted tequ^es at 
least some level of secunty and means for event-driven determining of flte 
type of connection operates in response to such determimtion. 

,9 The system of claim 14 wherein means for determining a security level of data 
before sending the data across the current network comprises means for 
reading the security level of data ftom a markup element embedded m the 
data. 



20. 



21. 



The system of claim 1 4 wherein means for deternnning a security level of data 
before sending the data across the current network comprises means for 
reading the security level of data from meta-data in a header in a network 
message. 

The system of claim 14 further comprising means for returning a non-fatal 
error to a sending program if the comtection to the network lacks a securrty 
control required for the data. 

22 The system of claim 21 further comprising means for the sending program to 
inform a user that the data will be held in a security buffer until the computer 
is comiected to a changed computing enviromnent having a new type of 
connection that has the security control required for the data. 

23. The system of claim 21 fbrther comprising means for the sending program to 
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prompt a user with the option to create a secure tum>el for transmission of the 
data. 

24 A system for providing a necessary level of security for a computer capable of 
connecting to different computing enviromnents, the system compnsmg: 

means for connecting the computer to a network in a first computing 
environment; 



means 



for speciiying a security level for data to be sent across the network; 
10 means for instructing a sending progrm to send the data across the network; 

means for receiving an indication that security control of the first computing 
enviromnent lacks a security control required for the specified security level; 

,5 means for connecting the computer to the network in a second computing 

enviromnent, wherein the second computing enviromnent has the security 
control required for the specified security level; and 

means for receiving an indication that the data has been sent across the 

20 network. 

25. The system of claim 24 further comprising: 



for detemiining, when the computer is comiected to the second 
network, that the second computing enviromnent has the security control 



means 
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required for the specified security level; and 

means for automatically sending the data across the network promptly upon 
determining that the second computing enviromnent has the security control 
required for the specified security level. 

26. The system of claim 24 further comprising: 

means for receiving an indication that the second computing enviromnent has 
the security control required for the specified security level; and 

means for again instructing the sending program to send the data across the 
network. 



34 



10 



15 



Patent Application 

AUS920030640US1 



27 Acomputerprogramproductforprovidinganecessarylevelofsec^^^^^^^ 
computer capable of connecting to different computing enviromnents, the 
computer program product comprising: 

a recording medium; 

means, recorded on the recording medium, for monitoring a type of 
connection between the computer and a network in a current computmg 
enviroimient; 

means, recorded on the recording medium, for determining a security level of 
data before sending the data across the network; 

means, recorded on the recordmg medium, for storing the data in a buffer 
instead sending the data across the network if the connection to the network 
lacks a security control required for the determined security level of the data; 
and 



20 



means 



recorded on the recording medium, for sending the data ftom the 
buffer when the computer is comrected to a changed computing environment 
having a new type of connection that has the security control required for the 



data. 



28 The computer program product of claim 27 wherein means for momtormg a 
we of connection comprises meaas, recorded on the recording medtum, for 
periodically determining the type of connection between the computer and the 
network. 



35 



AUS920030640US1 



Patent Application 



29 The computer program product of claim 27 wherein means for momtonng a 
t^e of connection comprises means, recorded on the recording medtum. for 
evcnt-drtven determining of the type of connection between the computer and 
the network. 

30 m computerprogram product of claim 29 wherein elements of the system 
■ are operated by a software process and the means for event-driven determmmg 
of the type of comtection is executed whenever the process is mvoked. 

3. The computer program product of claim 29 wherein execuUon of the means 
for detennining a security level results in a determination tot data to be 
ttansmitted requires at leas, some level of security and means for event-dnven 
determining of the type of connection executes in response to such 
determination. 

32 The computer program product of claim 27 wherein means for determining a 
security level of data before sending the data across the current network 
comprises means, recorded on the recordingmedium, for reading the secunty 

level of data from a markup element embedded in the data. 
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34. 



J + ^loim 97 wherein means for determining a 
The computer program product of claim 27 wtierem mc 

security level of data before sending the data across the current network 

comprises means, recorded on the recording medium, for reading the secunty 

level of data from meta-data in a header in a network message. 

The computer program product of claim 27 frirther comprising means. 
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recorded on the recording medium, for remming a non-fatal error to a sending 
pro-am if the connection to the network lacks a security control required for 
the data. 



35. 



36. 



10 



The computer program product of claim 34 further comprising means, 
recorded on the recording medium, for the sending program to mform a user 
mat the data will be held in a security buffer until the computer is connected to 
a changed computing enviromnent having a new type of connection that has 
the security control required for the data. 

The computer program product of claim 34 further comprising means, 
recorded on the recording medium, for the sending pro^ to prompt a user 
with die option to create a secure tumiel for transmission of the data. 

37 A computer program product for providing a necessary level of security for a 
computer capable of connecting to different computing enviromnents, the 
computer program product comprising; 

a recording medium; 

means, recorded on the recording medium, for comiecting die computer to a 
network in a first computing environment; 

means, recorded on the recording medium, for specifying a security level for 
data to be sent across the network; 



means 



, recorded on the recording medium, for instructing a sending program 
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to send the data across the network; 

«, recorded on the recording medium, for receiving an indication that 
security control of the first computing enviromnent lacks a security control 
required for the specified security level; 

„eans. recoMed on *e recording medium, for com,ect,ng *e computer to the 
network in a second computing environment. wl,erein tl,e second computmg 
environment has the security control required for the specified security level; 
and 

^eans, recorded on the recording milium, for receiving an indication that the 
data has been sent across the network. 



38. 



10 



The computer program product of claim 37 forther comprising: 

means, recorded on the recording medium, for determining, when the 
computer is comtected to the second network, that the second computmg 
enviromnent has the security control required for the specified security level; 

and 

means, recorded on the recording medium, for automatically siding the data 
across the network promptly upon determining that the second compuhng 
enviromnenthas the sccunty control required for the specified security level. 

39. The computer program product of claim 37 further compnsing-. 
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„ear,s, reoonied on the recording mrflum, for receiving an indication tl,at the 
second computing environment has the security control required for the 

specified security level; and 

means, recorded on the recording medium, for again instructing the sending 
program to send the data across the network. 
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